Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Verdant Renewal Limited (“we”, “us”, “our”) collects, uses, discloses, transfers, stores, and protects personal data when you interact with us, including when you visit our website, contact us, request information, purchase our services, or otherwise engage with our regenerative business activities.
Verdant Renewal Limited is the data controller responsible for the processing of your personal data described in this Privacy Policy.
Company details:
- Legal name: Verdant Renewal Limited
- Address: Unit 4, Mill Road Industrial Estate, Mill Road, Wellingborough, Northamptonshire NN8 1LJ, UK
- Email: [email protected]
- Phone: +44 1933 684527
We operate as a regenerative business, which may involve providing services, products, advice, communications, project coordination, reporting, operational support, and related activities connected to sustainability, environmental improvement, resource efficiency, and regeneration-focused initiatives.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on how you interact with us:
- Identity data: name, title, job title, company name, and similar identifiers.
- Contact data: email address, telephone number, postal address, billing address, and delivery address.
- Communication data: correspondence, enquiry details, feedback, call notes, meeting records, and support communications.
- Contract and transaction data: service details, order history, invoices, payment status, and fulfilment-related information.
- Technical data: IP address, browser type, device identifiers, operating system, log data, and cookie-related information.
- Usage data: website interactions, pages viewed, navigation patterns, and engagement information.
- Preference data: marketing preferences, service interests, and communication choices.
- Business and project data: information you provide in relation to regenerative projects, assessments, consultations, site coordination, or collaboration.
We may collect personal data directly from you, automatically through our website or digital systems, from business partners, service providers, publicly available sources, or other third parties where lawful.
We only process personal data where appropriate for our business operations, legal obligations, customer relationships, service delivery, administration, security, and improvement of our regenerative services.
3. Purpose of data processing
We process personal data for the following purposes:
- To respond to enquiries, requests, and communications.
- To provide, manage, and improve our services and business operations.
- To enter into, perform, and administer contracts.
- To process transactions, invoices, and payments.
- To maintain records and support internal administration.
- To deliver customer support and resolve issues.
- To conduct planning, coordination, reporting, and analysis connected to our regenerative business activities.
- To send service-related communications and, where permitted, marketing communications.
- To maintain website functionality, performance, and security.
- To detect, prevent, and investigate fraud, abuse, or security incidents.
- To comply with legal, regulatory, tax, accounting, and contractual obligations.
- To protect our rights, property, and legitimate business interests.
4. Legal basis for processing
We process personal data only where we have a lawful basis to do so. Depending on the circumstances, our legal bases may include:
- Consent: where you have given clear permission for a specific purpose, such as certain marketing activities or optional cookies.
- Contract: where processing is necessary to enter into or perform a contract with you.
- Legal obligation: where processing is required to comply with applicable laws, regulations, court orders, tax rules, or record-keeping duties.
- Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided that your rights and interests do not override those interests. These may include managing our business, improving services, preventing fraud, securing systems, and handling communications.
Where required by law, we will obtain your consent before processing your personal data for particular purposes. You may withdraw consent at any time, as described below.
5. Data sharing and third parties
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy, including:
- Service providers: IT hosting, website support, analytics, communications, customer relationship management, document storage, and administrative support providers.
- Professional advisers: accountants, auditors, insurers, lawyers, consultants, and other professional advisers.
- Payment and finance providers: payment processors, banks, and related financial service providers.
- Business partners and contractors: suppliers, subcontractors, and collaborators involved in service delivery or project fulfilment.
- Regulatory, legal, and public authorities: where disclosure is required or permitted by law, regulation, legal process, or a lawful request.
- Corporate transaction parties: potential purchasers, investors, successors, or advisers in connection with a merger, acquisition, restructuring, or sale of assets.
We require third parties that process personal data on our behalf to do so in accordance with applicable data protection obligations and to implement appropriate confidentiality and security measures.
We do not sell personal data.
6. Data transfer to third countries
Your personal data may be transferred to, stored in, or accessed from countries outside the United Kingdom, including countries that may not provide the same level of data protection as the UK.
Where such transfers occur, we will take appropriate safeguards to protect your personal data, which may include:
- using approved contractual safeguards;
- relying on adequacy decisions or equivalent legal mechanisms where available;
- carrying out transfer risk assessments where required;
- applying technical and organisational measures to protect the data.
You may contact us using the details below for more information about international data transfers and the safeguards we use where applicable.
7. Storage duration
We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, contractual, or dispute-resolution requirements.
The retention period may vary depending on the nature of the data and the purpose of processing. In general:
- contact and enquiry records are retained for as long as needed to handle the enquiry and for a reasonable follow-up period;
- contractual and transaction records are retained for the duration of the relationship and for a period afterwards to meet legal and business requirements;
- marketing preferences are retained until you opt out or withdraw consent, where applicable;
- technical and security logs are retained for a limited period unless longer retention is required for investigation or legal reasons.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices and legal obligations.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain circumstances.
- Data portability: to receive personal data you provided to us in a structured, commonly used, machine-readable format and, where technically feasible, to request transfer to another controller.
- Objection: to object to processing based on legitimate interests and, where applicable, to direct marketing.
To exercise any of these rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding. We will respond within the time period required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may not be able to provide certain services or communications that depend on that consent. We will explain the consequences if and when they arise.
You can withdraw consent by contacting us at [email protected] or by using any available opt-out mechanism provided in our communications, where applicable.
10. Right to complain
If you have concerns about our use of your personal data, please contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is ordinarily the Information Commissioner’s Office (ICO).
We encourage you to contact us promptly if you believe your rights have been infringed so that we can investigate and respond appropriately.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include:
- access controls and role-based permissions;
- password protection and authentication measures;
- secure storage and encryption where appropriate;
- backup and recovery procedures;
- staff confidentiality obligations and training;
- monitoring, logging, and incident response practices.
While we take reasonable steps to protect personal data, no transmission or storage system can be guaranteed to be completely secure. If we become aware of a security incident affecting your personal data, we will handle it in accordance with applicable law.
12. Contact information
If you have any questions about this Privacy Policy or our data processing practices, or if you wish to exercise your rights, please contact:
- Verdant Renewal Limited
- Address: Unit 4, Mill Road Industrial Estate, Mill Road, Wellingborough, Northamptonshire NN8 1LJ, UK
- Email: [email protected]
- Phone: +44 1933 684527
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, regulatory guidance, or business operations.
Any updated version will be made available on our website or otherwise communicated where appropriate. The revised policy will apply from the date of publication unless stated otherwise.
We encourage you to review this Privacy Policy periodically to stay informed about how Verdant Renewal Limited processes personal data.